Privacy Policy

1. Controller

TenderClaw (the “Service”) is operated by TenderClaw GmbH, registered in Switzerland. For data protection matters, contact us at privacy@tenderclaw.com.

2. Data we collect

• Account data: email address, name, job title, phone number.
• Company data: company name, address, website, description, services, certifications, reference projects, and documents you upload.
• Usage data: pages visited, features used, timestamps — collected via server logs and first-party analytics.
• Tender and grant data: tender matches, draft proposals, and AI-generated content associated with your account.

3. How we use your data

• Providing and improving the TenderClaw platform.
• Matching your company profile to relevant tenders and grant programs.
• Generating AI-assisted proposal drafts using your company context.
• Sending transactional emails (account confirmation, match notifications).
• Complying with legal obligations.

4. Legal basis

We process your data on the following legal bases under the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR):

• Contract performance — to provide the Service you signed up for.
• Legitimate interest — to improve the Service and prevent abuse.
• Consent — for optional communications; you may withdraw consent at any time.

5. Third-party processors

We share data only with processors necessary to operate the Service:

• Supabase — database and file storage (EU region).
• Vercel — hosting and edge functions (EU region).
• Anthropic — AI language model processing. Documents and company context are sent to Anthropic's API solely to generate responses; data is not used to train Anthropic's models under our enterprise agreement.
• Resend — transactional email delivery.

We do not sell your data to third parties.

6. Data retention

We retain your account data for as long as your account is active. Uploaded documents are stored until you delete them or close your account. You may request deletion at any time (see section 8). We may retain anonymised, aggregated statistics indefinitely.

7. Cookies

We use only strictly necessary cookies for session management and authentication. We do not use advertising or tracking cookies. No cookie consent banner is required.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Export your data in a portable format.
• Object to or restrict processing.

To exercise any of these rights, email privacy@tenderclaw.com. We will respond within 30 days.

9. Security

All data is transmitted over TLS. Database access is restricted by row-level security policies. API keys and secrets are never exposed to the client. We conduct regular security reviews.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users at least 14 days before taking effect.

11. Contact

Questions about this policy? privacy@tenderclaw.com